Detecting computer data containing compressed video data as banned computer data

Abstract

Computer data containing compressed video data is examined to see if it is banned computer data, for example containing pirate or copyright-infringing video material, by examining the identifier of the video codec associated with the compressed video data. Certain video codec identifiers are highly correlated with the computer data concerned being banned computer data. Thus, an examination of the header file of the computer data may be used as an efficient and sensitive tool for identifying the computer data as banned computer data.

Description

BACKGROUND OF THE INVENTION[0001]1. Field of the Invention[0002]This invention relates to the field of data processing systems. In particular, this relates to the detection of computer data containing compressed video data as banned computer data, such as, for example, computer files or streamed computer data containing a copyright infringing movie.[0003]2. Description of the Prior Art[0004]It is known to provide malware scanners, which may for example be web access scanners, email scanners, on demand file scanners, on access file scanners and the like, that serve to detect malware within data being stored, received, manipulated or used in some other way. The threat posed by computer viruses is well known. It is also important in other circumstances, particularly to many businesses, that their computer systems should not be used in connection with improper, inappropriate or otherwise undesirable computer data. As an example, email scanners may be used to scan email traffic for the p...

AI Technical Summary

Benefits of technology

[0011]The invention recognises that a large proportion of banned computer data containing compressed video data uses distinctive decoders that are identified within the computer data and are different from the decoders that are typically used by legitimate computer data containing compressed video data. The banned versions typically tend to use higher degrees of compression than the legitimate versions of the material, so as to ease download or storage on conventional CDs. These higher degrees of compression rely upon their own non-standard decoders. Accordingly, identifying the decoder to be used with some compressed video data and comparing this with predetermined characteristics indicative of whether or not the decoder is associated with banned material is an efficient and effective way of identifying such material. The technique does not seek to characterise the decompressed video data itself, but rather takes the approach of characterising the decoder associated with that compressed video data. This is surprisingly effective and may be relatively readily implemented. Alternatives relying upon the decompression and examination of the compressed video data itself are much less efficient and prone to significant inaccuracies.

[0018]As an alternative approach, possibly giving a higher degree of security at the cost of more false alarms, other embodiments can use identifiers of decoders associated with allowed computer data, e.g. known legitimate decoders, and trigger banned computer data actions if a match with a known allowed decoder is not found.

Problems solved by technology

One type of undesirable computer data which it may be wished to exclude from a computer system is copyright infringing or otherwise unauthorised video data.

There has also arisen a problem with unauthorised and / or copyright infringing video data being distributed via the Internet and other mechanisms.

These compressed versions are often pirate, copyright-infringing versions.

It can be embarrassing, damaging and potentially actionable should such material circulate within a corporate network environment.

In addition to this, the use of such a corporate network to manipulate this kind of material is an inappropriate use of the computing resources of the organisation and likely in contravention to company policy.

Images